Replying to @kdzwinel and @dmarti, @kfranasz
Right — but they can be shaven away with browser improvements. SSO should really be a browser concern (which should allow you to pick identity providers not listed by the site, and the spec could require a choice screen + no email sharing). Bot detection: 1P?
♥ 1